The mission of Microsoft Digital Security & Resilience (DSR) is to enable Microsoft to build the most trusted devices and services, while keeping our company safe and our data protected. As part of Microsoft’s Security, Compliance, Identity, and Management organization, and a steward of Microsoft and our customer’s data, a core function of Microsoft DSR is ensuring the security of every aspect of the business. Microsoft DSR is responsible for company-wide information security and compliance, with a strategic focus on information protection, assessment, awareness, governance, and enterprise business continuity.
As a manager of the Security Engineering team, you will have an opportunity to contribute your deep technical leadership and problem-solving skills to lead a team of engineers working on the security of the underlying platform, production code and infrastructure of many Microsoft products used by millions of customers, including Office 365, OneDrive, SharePoint, Microsoft Teams, Skype, and Cortana. We build and manage services to manage continuous security posture of cloud scale services. The team is customer-focused with an emphasis on security, a great user experience and high reliability. You would drive solutions to challenging technical problems involving security for large scale systems and lead critical design initiatives, be accountable for delivery and take part in strategic and tactical decisions in the context of mission-critical services.
As an Engineering Manager on the team, your leadership will be critical in ensuring engineering rigor and driving security innovation. You must be passionate about building secure services and will also have opportunities to nurture new ideas for additional business outcomes and deliver high quality of service. You will be leading and influencing other engineers on the team and across groups, create and maintain positive and productive working relationships.
Responsibilities
Lead the architecture, design and implementation of security engineering and security automation projects in the context of large scale services, working with a variety of stakeholders.
Lead your team while also collaborating with stakeholders in peer teams and organizations to deliver production-grade solutions for security challenges that scale and work across multiple products while meeting standards of service quality, availability, scale and performance.
Influence and align product vision by collaborating with customers, partners, product management and engineering teams.
Have a hands-on approach to technical leadership in setting the engineering direction for the team with sound design and development best practices.
Drive engineering roadmaps, leading teams, mentoring, and helping others grow.
Own career development of team through active coaching.
Lead the team by bringing clarity, creating energy, and driving results.
Create a strong culture of engineering excellence, customer passion, collaboration, diversity, and inclusion.
Qualifications
Required
8-10 years of overall industry experience in software development and building world class solutions with 3-5 years of that as SWE manager.
A Bachelor’s degree in Computer Science or equivalent experience
Experience in designing, coding, debugging and testing production grade cloud services
Experience/understanding of addressing security issues in distributed cloud-based environments and across the dev ops ecosystem.
Experience in technical leadership in driving engineering roadmaps, leading v-teams, mentoring and helping others grow technically.
Knowledge of common security vulnerabilities/mitigations
Passion to grow and develop other engineers and leads.
Preferred
Proficient with a cloud computing environment like Azure (preferred), GCP or AWS.
Experience with CICD pipelines/automation, agile/scrum processes
Experience building and operating scalable microservices using Docker + Kubernetes.
Ability to reason about security challenges and propose practical solutions
Knowledge of Security Development Lifecycle, security standards and frameworks like NIST, OWASP, etc.
Experience implementing security features/automated mitigations for common security issues.
Ability to define, design and implement telemetry and proactive monitoring for the services to run the operations efficiently in production environments.
Experience with security tools/techniques such as SAST, DAST, fuzzing, pen-testing, etc.
Exposure to security protocols and infrastructure components such as OAuth, OIDC, PKI, IRM, A/AD, etc.
Experience with reporting technologies/frameworks such as PowerBI.
Experience with Kusto or other big data stores
Microsoft is an equal opportunity employer. Consistent with applicable law, all qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.